oda7

Privacy Policy

Last updated: 21 October 2026

This policy explains how (not set yet) ("we", "us") collects, uses, shares and protects personal data when businesses and their teams use oda7, our software for running sales and marketing teams ("the Service"). It follows India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who is responsible for the data

Your account data. For the people who sign up for and use oda7 (account holders and their team members), we decide how that data is used, so we are the Data Fiduciary for it.

Data a business puts into oda7. Businesses use oda7 to manage their own leads and customers: names, phone numbers, emails, call records, messages and similar records. For that data, the business that uses oda7 is the Data Fiduciary and decides why and how it is collected. We process it only on that business's instructions, to run the Service for them. If you are a lead or customer of a business that uses oda7, please contact that business first about your data; we will help them answer you.

2. What we collect

  • Account details: name, work email, phone number, role, the organization you belong to, your password (stored only as a secure hash) and sign-in records.
  • Business records you add: leads and their details (including campaign details such as UTM tags and ad names), notes, calls and call recordings, messages, bookings, quotes, attendance, payroll, incentives and the files you upload.
  • Data from tools you connect: for example lead forms from Meta, Google Ads or LinkedIn, rows from a Google Sheet you share, messages and delivery updates from WhatsApp or email tools, and events from webhooks or Zapier.
  • Technical data: IP address, browser and device type, pages used, and error logs, to keep the Service secure and working.
  • Cookies: we use cookies that keep you signed in and remember your settings. We do not use advertising cookies in the Service.

3. Google user data

oda7 can connect to Google only when you choose to. Here is exactly what each Google connection reads and why.

  • Sign in with Google (scopes openid, email, profile): your name, email address and profile picture, only to create your account and sign you in.
  • Google Calendar (scope calendar.events, plus your email address): to create, update and cancel calendar events for the meetings and follow-ups you schedule in oda7, and to show which Google account is connected. We do not read other events in your calendar.
  • Google Ads (scope adwords): to read the lead form submissions from your Google Ads lead forms, so new leads appear in oda7, and to read the campaign they came from.

We use Google user data only to provide these features to you. We do not sell it, we do not use it for advertising, and we do not use it to build profiles or to train artificial intelligence models. People at our company do not read it, except when you ask us to for support, when it is needed for security, or when the law requires it.

oda7's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar or Google Ads at any time on the screen in oda7 where you connected it, or remove oda7's access at myaccount.google.com/permissions. When you disconnect in oda7, we ask Google to cancel the access and delete the stored access tokens for that connection.

4. Why we use personal data

  • To provide the Service: show, route and work leads, make calls, send messages, run reports.
  • To create and secure accounts, and to prevent fraud and misuse.
  • To send service emails, such as invitations, password resets and alerts.
  • To bill paying customers.
  • To give support, fix problems and improve the Service.
  • To meet legal duties.

We use account data on the basis of your consent and to provide the Service you signed up for. Business records are processed for the business that uses oda7, under our agreement with them.

5. Who we share data with

We do not sell personal data. We share it only with:

  • Service providers that run parts of the Service for us, such as hosting, email delivery, telephony (for calls and SMS), payment processing and, when a business turns on AI features, AI providers. They may use the data only to do that work for us.
  • Tools a business chooses to connect, such as WhatsApp, email or marketing tools, Zapier or a webhook. The business decides what is sent there.
  • Authorities, when Indian law or a valid legal order requires it.
  • A buyer or successor, if our business is sold or merged, under the same protections.

6. How we protect data

Data is sent over encrypted connections (HTTPS). Passwords are stored as one-way hashes, and connection secrets and access tokens for other services are stored encrypted. Access inside a business's workspace follows the roles and permissions its admin sets. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as the DPDP Act requires.

7. How long we keep data

We keep account data while your account is active. A business's records stay while it uses the Service and are deleted or returned when it closes its account, unless the law requires us to keep them longer (for example tax and billing records). Backups are removed on their normal cycle.

8. Your rights

Under the DPDP Act you can:

  • ask what personal data we hold about you and how we use it;
  • ask us to correct, complete or update it;
  • ask us to erase it, where we no longer need it;
  • withdraw consent you gave, at any time (this does not undo what was done before);
  • nominate another person to act for you if you die or cannot act;
  • raise a complaint with us, and then with the Data Protection Board of India.

Write to (not set yet). We reply within 30 days. For data a business put into oda7, we will pass your request to that business, which decides.

9. Children

The Service is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.

10. Where data is stored

Data is stored on servers we rent from hosting providers. Some service providers may process data outside India; when they do, we use providers that protect it at least as well as this policy, and only where Indian law allows it.

11. Changes to this policy

If we change this policy, we update the date at the top. For important changes we tell account holders by email or in the Service before they take effect.

12. Contact and grievance officer

(not set yet)
(not set yet)
Email: (not set yet)

Grievance Officer (DPDP Act): (not set yet), at the email above. See also our Terms of Service.